Operation and maintenance operation control method, electronic device, storage medium and program product

Abstract

The application discloses an operation and maintenance operation control method, an electronic device, a storage medium and a program product, and belongs to the technical field of safe operation and maintenance. The method comprises the following steps: obtaining a command execution request, wherein the command execution request comprises execution command information, an operation and maintenance operation command and network element identification information; intercepting the sending of the operation and maintenance operation command to a target network element device, and determining a target execution command according to echo information fed back by the target network element device in response to the execution command information; and in response to the determination that the target execution command is allowed to be executed according to the target execution command and the interception configuration information of the target network element device, sending the operation and maintenance operation command to the target network element device. In this way, the reliability of command interception can be improved, and meanwhile, an additional 4A gateway is not needed for command interception, and the interception configuration information of the target network element device can be flexibly configured according to actual needs, so that the command interception scene of various types of network element devices can be adapted.

Description

Technical Field

[0001] This application relates to the field of security operation and maintenance technology, and in particular to an operation and maintenance control method, electronic device, storage medium and program product. Background Technology

[0002] During equipment operation and maintenance, maintenance personnel typically input different commands to manage the equipment. In order to reduce the risks caused by unauthorized execution of high-risk commands during operation and maintenance, it is necessary to effectively control the execution of commands.

[0003] In related technologies, 4A gateways can be used to intercept high-risk commands. Specifically, when maintenance personnel execute commands, the 4A gateway determines whether execution is allowed based on the risk level of the user-input command itself. If the 4A gateway allows execution, the operation command on the device will execute normally; if the 4A gateway does not allow execution, it will indicate that the operation command execution failed. However, because the interaction method between the 4A gateway and the network management system is different, it cannot be directly integrated with the network management system, making it inconvenient to manage and deploy it. Furthermore, the high-risk command management list of the 4A gateway lacks device and scenario segmentation, making targeted and refined command control impossible, thus limiting the command interception scenarios. Summary of the Invention

[0004] This application provides an operation and maintenance control method, electronic device, storage medium, and program product to at least solve the problems of inconvenient management and deployment and limited command interception scenarios when using 4A devices for high-risk command interception in related technologies.

[0005] To solve the above-mentioned technical problems, this application is implemented as follows: In a first aspect, embodiments of this application provide an operation and maintenance control method, comprising: acquiring a command execution request, wherein the command execution request includes execution command information, an operation and maintenance command, and network element identification information, wherein the operation and maintenance command is used to instruct a target network element device corresponding to the network element identification information to execute the target execution command indicated by the execution command information; intercepting the transmission of the operation and maintenance command to the target network element device, and determining the target execution command based on the feedback information returned by the target network element device in response to the execution command information; and in response to determining that the execution of the target execution command is permitted based on the target execution command and the interception configuration information of the target network element device, sending the operation and maintenance command to the target network element device.

[0006] In a second aspect, embodiments of this application provide an electronic device, which includes a processor and a memory. The memory stores programs or instructions that can run on the processor, and when the programs or instructions are executed by the processor, they implement the steps of the method described in the first aspect above.

[0007] Thirdly, embodiments of this application provide a computer-readable storage medium on which a program or instructions are stored, which, when executed by a processor, implement the steps of the method described in the first aspect above.

[0008] Fourthly, embodiments of this application provide a computer program product, the computer program product including a computer program stored on a non-transitory computer-readable storage medium, the computer program including program instructions, which, when executed by a computer, cause the computer to perform the steps of the method described in the first aspect above.

[0009] In this embodiment, a command execution request is obtained, which includes execution command information, operation and maintenance commands, and network element identification information. The operation and maintenance commands sent to the target network element are intercepted, and the target execution command is determined based on the feedback information from the target network element regarding the execution command information. In response to determining that the execution of the target execution command is permitted based on the target execution command and the interception configuration information of the target network element, the operation and maintenance commands are sent to the target network element. This avoids users circumventing command interception using arrow keys, Tab keys, or other special commands, improving the reliability of command interception. Furthermore, no additional configuration of a 4A gateway for command interception is required, and the interception configuration information of the target network element can be flexibly configured according to actual needs, thus adapting to command interception scenarios for various types of network element devices.

[0010] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and do not limit this application. Attached Figure Description

[0011] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0012] Figure 1 This illustration shows an application scenario diagram of the operation and maintenance control method provided in the embodiments of this application; Figure 2 A flowchart illustrating the operation and maintenance control method provided in an embodiment of this application is shown. Figure 3 A flowchart illustrating the command extraction method provided in an embodiment of this application is shown; Figure 4 An example diagram of the time-sharing management strategy configuration page provided in an embodiment of this application is shown; Figure 5 A flowchart illustrating the command execution method provided in an embodiment of this application is shown; Figure 6The diagram shows an interface display of the authorization prompt information provided in an embodiment of this application; Figure 7 A schematic diagram of the authorization execution process provided in an embodiment of this application is shown; Figure 8 A schematic diagram of the operation and maintenance control system provided in an embodiment of this application is shown; Figure 9 A schematic diagram of the hardware structure of the electronic device provided in an embodiment of this application is shown. Detailed Implementation

[0013] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0014] To mitigate the risks associated with unauthorized execution of high-risk commands during operation and maintenance, relevant technologies propose a solution using a 4A gateway for high-risk command interception. This solution involves the device automatically sending the command to the 4A gateway for authorization verification. If the 4A gateway allows execution, the command will execute normally on the device; otherwise, it will display a command execution failure message.

[0015] The solution of using a 4A gateway to intercept high-risk commands has at least the following problems: 1) This solution requires the additional deployment of a dedicated 4A gateway for command interception. Due to the different interaction methods between the 4A gateway and the network management system, the 4A gateway cannot directly link with the network management system. 2) The 4A gateway cannot implement time-sharing control functionality; 3) Configuring high-risk interception templates on a 4A gateway is complex and difficult to deploy and implement; 4) Both the 4A gateway and the device need to support the high-risk command interception function; 5) The high-risk command management list in the 4A gateway does not support different devices or scenarios, and the command interception scenario is limited.

[0016] To address the aforementioned problems in the safe operation and maintenance of equipment, this application provides an operation and maintenance control method, such as... Figure 1As shown, this method can be applied to server 110, which can be a network management server. When a user needs to execute an operation and maintenance command, the server 110 sends the command to network element device 120. If the server 110 detects that the sent command does not meet the requirements, it will intercept the command and send a prompt message to the client. This client can be either the first client 131 used by the operator or the second client 132 used by the administrator. In this way, there is no need to configure a 4A gateway for command interception. Server 110 can flexibly configure the interception configuration information of network element device 120 according to actual needs, thus adapting to command interception scenarios for various types of network element devices.

[0017] Please see Figure 2 , Figure 2 A flowchart illustrating the operation and maintenance control method provided in this application embodiment is shown. The execution entity of this method can be a server 110. As shown in the figure, the operation and maintenance control method 200 may include the following steps: Step 201: Obtain a command execution request. The command execution request includes execution command information, operation and maintenance command, and network element identification information. The operation and maintenance command is used to instruct the target network element device corresponding to the network element identification information to execute the target execution command indicated by the execution command information.

[0018] In one exemplary embodiment, a user performs maintenance operations on a target network element device through client 130. The user enters the execution command "reboot" (indicating restarting the target network element device) in the command line of client 130, and then enters a maintenance operation command. This maintenance operation command instructs the target network element device corresponding to the network element identification information to execute the target execution command indicated by the execution command information entered in the command line. In specific applications, the maintenance operation command can be the Enter key, or other pre-set keys, such as the "F1" key, "Ctrl+Enter" key, etc. These keys are used to trigger the target network element device to execute the target execution command indicated by the execution command information entered in the command line.

[0019] Step 202: Intercept the operation and maintenance command sent to the target network element device, and determine the target execution command based on the feedback information of the target network element device in response to the execution command information.

[0020] In one exemplary embodiment, server 110 intercepts operation commands sent to the target network element device to ensure that the target execution command indicated by the execution command information is not directly executed on the target network element device. However, since the execution command information entered by the user in the command line of client 130 can be the arrow keys, Tab key, or other special commands, if server 110 intercepts commands based on the command information entered by the user in the command line, the target execution command indicated by the execution command information may not be effectively intercepted. For example, when the user enters "↑" in the command line, the target execution command executed by the target network element device is not "↑" itself, but the previous command indicated by "↑". Therefore, in this embodiment, the target execution command is determined based on the feedback information from the target network element device regarding the execution command information to improve the reliability of command interception.

[0021] Step 203: In response to determining that the execution of the target execution command is permitted based on the target execution command and the interception configuration information of the target network element device, the operation and maintenance command is sent to the target network element device.

[0022] The server 110 can determine whether to allow the execution of the target execution command based on the pre-configured interception configuration information of the target network element device. If it is determined that the execution of the target execution command is allowed, it sends an operation and maintenance command to the target network element device so that the target network element device executes the target execution command indicated by the execution command information.

[0023] Through the above steps, a command execution request is obtained, which includes execution command information, operation and maintenance commands, and network element identification information. The operation and maintenance commands sent to the target network element are intercepted, and the target execution command is determined based on the feedback information from the target network element regarding the execution command information. In response, based on the target execution command and the target network element's interception configuration information, it is determined whether the execution of the target execution command is permitted, and the operation and maintenance command is sent to the target network element. This avoids users circumventing command interception using arrow keys, Tab keys, or other special commands, improving the reliability of command interception. Furthermore, no additional configuration of a 4A gateway for command interception is required, and the interception configuration information of the target network element can be flexibly configured according to actual needs, thus adapting to command interception scenarios for various types of network element devices.

[0024] In some implementations, step 202 above, determining the target execution command based on the echo information returned by the target network element device in response to the execution command information, includes: Obtain the feedback information from the target network element device in response to the execution command information; compare whether the feedback command carried in the feedback information is consistent with the target execution command indicated by the execution command information; in response to the consistency between the feedback command and the target execution command indicated by the execution command information, extract the feedback command from the feedback information, and determine the target execution command based on the feedback command.

[0025] In practice, the user enters execution command information on the command line of client 130. The target network element device responds with echo information based on this execution command information. For example, if the user enters the command "reboot" on the command line, the target network element device will echo this command; as another example, if the user enters "↑" on the command line, the target network element device will echo the command indicated by "↑". The echo command carried in the echo information is compared character by character to see if it matches the target execution command indicated by the execution command information. When the echo command matches the target execution command indicated by the execution command information, the echo command is extracted from the echo information, and the target execution command is determined based on the echo command.

[0026] In other embodiments, after comparing whether the echo command carried in the echo information is consistent with the target execution command indicated by the execution command information, the method further includes: In response to the discrepancy between the echo command and the target execution command indicated by the execution command information, the system continues to acquire the next echo information fed back by the target network element until the received echo information satisfies a first condition; wherein the first condition includes at least one of the following: no next echo information fed back by the target network element is received within a preset time period after the echo information is received; the echo command carried in the first echo information is consistent with the target execution command indicated by the execution command information; the echo command is extracted from the echo information that satisfies the first condition, and the target execution command is determined based on the echo command.

[0027] The aforementioned preset time period can be set based on information such as device display rate, display time, display content, and historical behavior.

[0028] In practice, when the echo command is inconsistent with the target execution command indicated by the execution command information, the system continues to acquire the next echo information fed back by the target network element until the received echo information meets any of the following conditions: 1) If no further feedback information is received from the target network element within a preset time period after receiving the feedback information, that is, if it is determined that the target network element has finished feedback, then the feedback information is obtained; if it is determined that the target network element has not finished feedback, then wait for the target network element to continue feedback until the feedback ends. This preset time period can be set according to information such as device feedback rate, feedback time, feedback content, and historical behavior; 2) The echo command carried in the received echo information is consistent with the target execution command indicated by the execution command information.

[0029] Obtain the echo information that meets the above conditions, extract the echo command from the echo information, and determine the target execution command of the target network element device based on the echo command.

[0030] The aforementioned echo command can be obtained by segmenting the echo information according to a preset operation prompt; the preset operation prompt is obtained from the target echo information, which is the echo information fed back by the target network element device when a communication connection is successfully established with the target network element device.

[0031] The operation prompts can be " / ", "<", ">", etc., used to distinguish different parts of the command.

[0032] In one exemplary embodiment, such as Figure 3 As shown, the command extraction method described above includes the following steps: Step 301: A communication connection was successfully established with the target network element device, and the server 110 successfully connected to and logged into the device; Step 302: Extract the hostname and operation prompt from the target echo information returned by the target network element device when the login is successful; Step 303: Obtain the execution command information input by the user; Step 304: Obtain the operation and maintenance command input by the user. The operation and maintenance command can be Enter or Submit. Step 305: Intercept the operation command, that is, intercept the user's input of Enter or Submit command; Step 306: Compare the echo command carried in the echo information with the target execution command indicated by the execution command information entered by the user; Step 307: Determine whether the echo command is consistent with the target execution command indicated by the execution command information; if the echo command is inconsistent with the target execution command indicated by the execution command information, proceed to step 308; if the echo command is consistent with the target execution command indicated by the execution command information, proceed to step 311. Step 308: Detect information such as device response rate, response time, response content, and historical behavior; Step 309: Determine whether the execution command information entered by the user has been echoed on the target network element device; if the execution command information has not been echoed on the target network element device, proceed to step 310; if the execution command information has been echoed on the target network element device, proceed to step 311. Specifically, the system can continue to acquire the next feedback information from the target network element device until no further feedback information is received from the target network element device within a preset time period after acquiring the feedback information. In this case, it is determined that the execution command information has ended being displayed on the target network element device. The preset time period can be set based on the information acquired in step 310 above. Alternatively, the system can determine that the execution command information has ended being displayed on the target network element device when it is determined that the feedback command carried in the feedback information is consistent with the target execution command indicated by the execution command information. Step 310: Wait for the device to continue displaying the output, then return to step 308; Step 311: Extract the echo command from the echo information; Step 312: Complete command extraction and end the process.

[0033] The aforementioned determination of the target execution command based on the echo command includes: The format of the echo command is adjusted to obtain the target execution command.

[0034] In one exemplary embodiment, since the extracted echo commands may contain newlines, indentation, or non-echo characters, the format of the extracted echo commands can be adjusted to obtain the target execution command. The format adjustment includes, but is not limited to, removing newlines, removing prompts and non-echo characters, and removing redundant spaces and indentation. This can improve the accuracy of the target execution command.

[0035] In some implementations, step 202 above, after intercepting the sending of the operation and maintenance command to the target network element device, further includes: The interception configuration information of the target network element device is obtained, and the request time point corresponding to the target execution command is determined according to the command execution request. The interception configuration information includes an interception time period and matching information. The matching information includes one of the following: information corresponding to commands that are allowed to be executed; information corresponding to commands that are prohibited from being executed. In response to the request time point falling within the interception time period, the system determines whether to allow the execution of the target execution command based on the matching result of the target execution command in the matching information.

[0036] In one exemplary embodiment, the interception time period for the target network element device can be configured on a preset time-sharing control policy configuration page, such as... Figure 4As shown, firstly, select the target network element device to be managed from multiple network element devices, and then configure the interception time period for the selected target network element device. The interception time period can be a certain month, a certain week, or a certain day. For example, the interception time period is a week from Sunday to Saturday, or it can be a specific time period within a certain day. For example, the interception time period is 06:00-18:00 on Sunday.

[0037] Additionally, matching information can be configured for target network elements that require management. This configuration information includes information corresponding to allowed commands (i.e., a whitelist) or prohibited commands (i.e., a blacklist). For example, the matching information may include a scenario name, a blacklist, and a whitelist. Both the blacklist and whitelist can contain multiple sets of high-risk commands, each set including commands that need to be blocked or allowed, represented using regular expressions.

[0038] The target network element device can be identified by its model or series. Different network element devices can be blocked using different lists. For example, when a network element device is under strict control and allows fewer commands to be executed, a whitelist can be configured for that network element device. When a network element device allows more commands to be executed, a blacklist can be configured for that network element device.

[0039] In some implementations, after determining whether to allow the execution of the target execution command based on the matching result in the matching information, the method further includes: In response to the matching result of the target execution command in the matching information, it is determined that the execution of the target execution command is prohibited, and an authorization prompt message is sent to the operation and maintenance client. The authorization prompt message is used to instruct the operation and maintenance client to enter the authorization code of the target execution command. Obtain the authorization code returned by the operation and maintenance client based on the authorization prompt information, and perform authorization authentication on the authorization code; In response to the authorization authentication result indicating that the authorization code is valid, it is determined that the execution of the target command is permitted.

[0040] In other embodiments, after determining whether to allow the execution of the target execution command based on the matching result in the matching information, the method further includes: In response to the fact that the requested time point is outside the interception time period, it is determined that the execution of the target command is permitted.

[0041] In specific implementation, the interception configuration information of the pre-configured target network element device is obtained, and the request time point corresponding to the target execution command is determined according to the command execution request. When the request time point is outside the interception period, that is, the target execution command is not within the control period of the target network element device, it is determined that the execution of the target execution command is allowed. When the request time point is within the interception period, it is determined whether the execution of the target execution command is allowed according to the matching result of the target execution command and the matching information. Specifically, when the target execution command matches the information corresponding to the allowed command, or when the target execution command does not match the information corresponding to the prohibited command, it is determined that the execution of the target execution command is allowed.

[0042] In one exemplary embodiment, such as Figure 5 As shown, the command execution method described above may include the following steps: Step 501: Obtain the extracted target execution command and the request time point corresponding to the target execution command; Step 502: Determine whether the request time point corresponding to the target execution command is within the interception period; if it is determined that the request time point is outside the interception period, proceed to step 505; if it is determined that the request time point is within the interception period, proceed to step 503. Step 503: Obtain the interception configuration information, which includes the interception time period and matching information. The matching information includes the device type, execution command scenario, blacklist, and whitelist. The whitelist contains information corresponding to commands that are allowed to be executed, and the blacklist contains information corresponding to commands that are prohibited from being executed. Step 504: Determine whether to allow the execution of the target execution command based on the matching result in the matching information; if it is determined that the execution of the target execution command is allowed, proceed to step 505; if it is determined that the execution of the target execution command is prohibited, proceed to step 506. Step 505: Send an operation and maintenance command to the target network element device so that the target network element device executes the target execution command; Step 506: Proceed to the authorized execution process.

[0043] In another exemplary embodiment, when it is determined that the execution of the target execution command is prohibited based on the target execution command and the interception configuration information of the target network element device, an authorization prompt message is sent to the operation and maintenance client, such as... Figure 6 As shown, the authorization prompt information includes the authorization method, the username of the authorized person, and the authorization code. The user enters the authorization code on the authorization prompt information display interface, the server 110 obtains the authorization code, and performs authorization authentication on the authorization code; in response to the authorization authentication result indicating that the authorization code is valid, it is determined that the execution of the target command is allowed.

[0044] In some implementations, after authorizing and authenticating the authorization code, the method further includes: In response to the authorization authentication result indicating that the authorization code is invalid, the execution of the target execution command is prohibited, and an authorization failure message is sent to the operation and maintenance client.

[0045] Continuing with the above embodiment, when the authorization authentication result indicates that the authorization code is invalid, it is determined that the execution of the target command is prohibited, and an authorization failure prompt message is sent to the operation and maintenance client to remind the user that the authorization failed and to re-enter the authorization code.

[0046] In some implementations, before sending the authorization prompt information to the operation and maintenance client, the following steps are also included: Determine whether the execution time of the target execution command is within the authorization validity period of the target execution command; In response to the execution time point falling within the authorization validity period, it is determined that execution of the target execution command is permitted; In response to the execution time point being outside the authorization validity period, the step of sending the authorization prompt information to the operation and maintenance client is executed.

[0047] In one exemplary embodiment, such as Figure 7 As shown, the authorization process described above includes the following steps: Step 701: The operations and maintenance personnel apply for authorization from the second client 132 through the first client 131, send authorization information to the server 110, and then apply for authorization from the second client 132 through the server 110; Step 702: The operations and maintenance personnel enter the authorization code on the interface; Step 703: The authorization code is sent to the server 110 for judgment. If the authorization fails, it returns to the first client 131 with a message indicating authorization failure; if the authorization is successful, the authorization information is recorded, the command is executed, and the execution result is returned to the first client 131; Step 704: No re-authorization is required during the period when the authorization has not expired. If the authorization expires and a high-risk command is executed again, re-authorization is required.

[0048] In some implementations, after sending the operation and maintenance command to the target network element device, the method further includes: Obtain the execution result of the operation and maintenance command fed back by the target network element device; Send the execution result to the operation and maintenance client.

[0049] In practice, after sending the operation and maintenance command to the target network element device, the server 110 also obtains the execution result of the operation and maintenance command fed back by the target network element device and sends the execution result to the operation and maintenance client so that the user can know the execution status of the target network element device in a timely manner.

[0050] In one exemplary embodiment, this application also provides an operation and maintenance control system, which includes a first client 131, a second client 132, a server 110, and a network element device 120. For example... Figure 8 As shown, server 110 includes: policy module 111, interception module 112, command issuance module 113, command extraction module 114, and authorization module 115; Policy module 111 is used to configure and store interception configuration information; The interception module 112 is used to acquire a command execution request, which includes execution command information, operation and maintenance command, and network element identification information; intercept the sending of the operation and maintenance command to the network element device 120, and determine the target execution command based on the feedback information from the network element device 120 regarding the execution command information; in response to determining that the target execution command is allowed to be executed based on the target execution command and the interception configuration information of the network element device 120, the module sends the operation and maintenance command to the network element device 120. The command issuing module 113 is used to issue operation and maintenance commands to network element device 120; Command extraction module 114 is used to extract the target execution command indicated by the execution command information input by the user from the echo information of network element device 120; The authorization module 115 is used to obtain the authorization code input by the first client and check the validity of the authorization code; if the authorization code is valid, the authorized execution time point and operation and maintenance command are sent to the interception module 112; otherwise, an authorization failure prompt message is sent to the first client 131 to prompt the user that the authorization failed. The first client 131 includes: The user operation module is used to respond to user input and obtain command execution requests; The second client 132 includes: The authorization approval module is used to review the intercepted target execution commands. Once the review is approved, the command can be executed.

[0051] Figure 9 The diagram illustrates the hardware structure of an electronic device implementing the embodiments of this application. Referring to the diagram, at the hardware level, the electronic device 900 includes a processor 910, and optionally includes an internal bus 920, a network interface 930, and a memory 940. The memory 940 may include main memory 941, such as high-speed random-access memory (RAM), and may also include non-volatile memory 942, such as at least one disk storage device. Of course, the electronic device 900 may also include other hardware required for other services.

[0052] The processor 910, network interface 930, and memory can be interconnected via an internal bus 920. This internal bus 920 can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be categorized as an address bus, data bus, control bus, etc. For ease of illustration, only a single bidirectional arrow is used in this diagram, but this does not imply that there is only one bus or one type of bus.

[0053] Memory 940 stores programs. Specifically, the program may include program code, which includes computer operation instructions. Memory 940 may include main memory 941 and non-volatile memory 942, and provides instructions and data to processor 910.

[0054] Processor 910 reads the corresponding computer program from non-volatile memory 942 into memory and then runs it, forming a device for locating the target user at the logical level. Processor 910 executes the program stored in memory and specifically performs the following: Figure 2 , Figure 3 , Figure 5 or Figure 7 The methods disclosed in the embodiments shown achieve the functions and beneficial effects of the methods described in the preceding method embodiments, and will not be repeated here.

[0055] The above is as stated in this application. Figure 2 , Figure 3 , Figure 5 or Figure 7The methods disclosed in the illustrated embodiments can be applied to or implemented by processor 910. Processor 910 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above methods can be completed by integrated logic circuits in the hardware or by instructions in software form within processor 910. Processor 910 can be a general-purpose processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc.; it can also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software module can reside in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, or registers. This storage medium is located in memory, and the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0056] The computer device can also execute the methods described in the preceding method embodiments and achieve the functions and beneficial effects of the methods described in the preceding method embodiments, which will not be repeated here.

[0057] Of course, in addition to software implementation, the electronic device 900 of this application does not exclude other implementation methods, such as logic devices or a combination of hardware and software, etc. In other words, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0058] This application also proposes a computer-readable storage medium that stores one or more programs, which, when executed by an electronic device including multiple applications, cause the electronic device to perform... Figure 2 , Figure 3 , Figure 5 or Figure 7 The methods disclosed in the embodiments shown achieve the functions and beneficial effects of the methods described in the preceding method embodiments, and will not be repeated here.

[0059] The computer-readable storage medium mentioned above includes read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk, etc.

[0060] Furthermore, embodiments of this application also provide a computer program product, the computer program product including a computer program stored on a non-transitory computer-readable storage medium, the computer program including program instructions, which, when executed by a computer, implement the following process: Figure 2 , Figure 3 , Figure 5 or Figure 7 The methods disclosed in the embodiments shown achieve the functions and beneficial effects of the methods described in the preceding method embodiments, and will not be repeated here.

[0061] The embodiments of this application can be applied to various scenarios of electronic device collaboration or interconnection, including: collaboration and interconnection between mobile phones and laptops / tablets; collaboration and interconnection between mobile terminals and smart TVs / monitors; collaboration and interconnection between mobile phones or tablets and in-vehicle entertainment systems; collaboration and interconnection between mobile terminals and smart conferencing systems, etc. This satisfies users' diverse needs in smart home, smart office, and smart travel scenarios.

[0062] In summary, the above description is merely a preferred embodiment of this application and does not limit the scope of protection of this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application.

[0063] The systems, devices, modules, or units described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, a computer can be, for example, a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or any combination of these devices.

[0064] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can store information accessible to a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0065] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0066] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to interchangeably. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions in the method embodiments.

Claims

1. A method for operation and maintenance control, comprising: Obtain a command execution request, which includes execution command information, operation and maintenance command, and network element identification information. The operation and maintenance command is used to instruct the target network element device corresponding to the network element identification information to execute the target execution command indicated by the execution command information. The operation and maintenance command sent to the target network element device is intercepted, and the target execution command is determined based on the feedback information of the target network element device in response to the execution command information. In response to determining that the execution of the target execution command is permitted based on the target execution command and the interception configuration information of the target network element device, the operation and maintenance command is sent to the target network element device.

2. The method according to claim 1, characterized in that, The step of determining the target execution command based on the feedback information from the target network element device in response to the execution command information includes: Obtain the feedback information from the target network element device in response to the executed command information; Compare whether the echo command carried in the echo information is consistent with the target execution command indicated by the execution command information; In response to the echo command being consistent with the target execution command indicated by the execution command information, the echo command is extracted from the echo information, and the target execution command is determined based on the echo command.

3. The method according to claim 2, characterized in that, After comparing whether the echo command carried in the echo information is consistent with the target execution command indicated by the execution command information, the method further includes: In response to the discrepancy between the echo command and the target execution command indicated by the execution command information, the system continues to acquire the next echo information fed back by the target network element device until the received echo information satisfies a first condition; wherein the first condition includes at least one of the following: no next echo information fed back by the target network element device is received within a preset time period after the echo information is received; the echo command carried in the echo information is consistent with the target execution command indicated by the execution command information; Extract the echo command from the echo information that satisfies the first condition, and determine the target execution command based on the echo command.

4. The method according to claim 2 or 3, characterized in that, The echo command is obtained by segmenting the echo information according to a preset operation prompt; the preset operation prompt is obtained from the target echo information, which is the echo information fed back by the target network element device when a communication connection is successfully established with the target network element device.

5. The method according to claim 2 or 3, characterized in that, Determining the target execution command based on the echo command includes: The format of the echo command is adjusted to obtain the target execution command.

6. The method according to claim 1, characterized in that, After the interception sends the operation and maintenance command to the target network element device, the method further includes: The interception configuration information of the target network element device is obtained, and the request time point corresponding to the target execution command is determined according to the command execution request. The interception configuration information includes an interception time period and matching information. The matching information includes one of the following: information corresponding to commands that are allowed to be executed; information corresponding to commands that are prohibited from being executed. In response to the request time point falling within the interception time period, the system determines whether to allow the execution of the target execution command based on the matching result of the target execution command in the matching information.

7. The method according to claim 6, characterized in that, After determining whether to allow the execution of the target execution command based on the matching result in the matching information according to the target execution command, the method further includes: In response to the matching result of the target execution command in the matching information, it is determined that the execution of the target execution command is prohibited, and an authorization prompt message is sent to the operation and maintenance client. The authorization prompt message is used to instruct the operation and maintenance client to enter the authorization code of the target execution command. Obtain the authorization code returned by the operation and maintenance client based on the authorization prompt information, and perform authorization authentication on the authorization code; In response to the authorization authentication result indicating that the authorization code is valid, it is determined that the execution of the target command is permitted.

8. The method according to claim 7, characterized in that, After authorizing and authenticating the authorization code, the process further includes: In response to the authorization authentication result indicating that the authorization code is invalid, the execution of the target execution command is prohibited, and an authorization failure message is sent to the operation and maintenance client.

9. The method according to claim 7, characterized in that, Before sending the authorization prompt message to the operation and maintenance client, the following is also included: Determine whether the execution time of the target execution command is within the authorization validity period of the target execution command; In response to the execution time point falling within the authorization validity period, it is determined that execution of the target execution command is permitted; In response to the execution time point being outside the authorization validity period, the step of sending the authorization prompt information to the operation and maintenance client is executed.

10. The method according to claim 6, characterized in that, After determining whether to allow the execution of the target execution command based on the matching result in the matching information according to the target execution command, the method further includes: In response to the fact that the requested time point is outside the interception time period, it is determined that the execution of the target command is permitted.

11. The method according to claim 1, characterized in that, After sending the operation and maintenance command to the target network element device, the method further includes: Obtain the execution result of the operation and maintenance command fed back by the target network element device; Send the execution result to the operation and maintenance client.

12. The method according to any one of claims 1 to 11, characterized in that, The method is applied to the network management server.

13. An electronic device, characterized in that, The electronic device includes a processor and a memory, the memory storing programs or instructions that can run on the processor, the programs or instructions being executed by the processor to implement the steps of the method as described in any one of claims 1 to 12.

14. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the method as described in any one of claims 1 to 12.

15. A computer program product, characterized in that, The computer program product includes a computer program stored on a non-transitory computer-readable storage medium, the computer program including program instructions that, when executed by a computer, cause the computer to perform the steps of the method as described in any one of claims 1 to 12.

Images